995f6010317c248011e82bea25d9d16784af011404de0260a0b7d5d5e55bf106

Sharing

Copy URL Twitter E-mail

General

Target
995f6010317c248011e82bea25d9d16784af011404de0260a0b7d5d5e55bf106
Size 657KB
Sample260822-s16qaaz1as
SHA256 995f6010317c248011e82bea25d9d16784af011404de0260a0b7d5d5e55bf106
MD5 402d9843a0c131494bc49f43335772da
SHA1 3b85cd61e33557402e88b6ebe82510cd29644ec3
SHA512 c7f42ec9aadd015147dcdbbe07e47f49b97e2ba379996c036bbb7db4dd58c285040a57e21224b7994f78e55577bd78d661a3dcbe73296f0817b56f19a0190026
SSDEEP 12288:yMgyFmhQb6TbijIXYo+Qe/Rt0lSPaqfdwgxqx+hFMs:LrohE6TmOjjqaufC2qxA7
TLSH
T1CDE42390ADE65C00ED71F8F74FAB50AED529E7C920B1563D0E0C4962778B7E52E72C06
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  BepInEx\core\0Harmony.dll
- Size 200KB
- SHA256 1a21cc03424fc82c3dd1346905d16494536b9595ae4162228d99fb7c285c1031
- MD5 4705aa1c7a9795d2787722bc8c419ae8
- SHA1 aa1552cf0311f27ca02d34df0558a718d16fb660
- SHA512 2f2bb761d21d7288c2b373958a5eab228797d1a348147f8ff0ea603611c6d79e938a4ccf45f23ffc82500731a68bce8feafcd26a5264d79fd5d7435e6ba69b93
- SSDEEP 3072:VQsxAaNWfZKtIZWTr7MDiIVXQ9PsMIuvq14e3Lvvv9L2yZKDVkNCuwMTfyQV:GBa+UWi2XCH7s3RqyZ5NCuTeQ
- TLSH
  T124145B6267FD0616D7BF6BB4F47050040671FC17E9AAEB9D6C8464FA0C12780EA513BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  BepInEx\core\0Harmony20.dll
- Size 110KB
- SHA256 c755a5ab2712915a32f9a850d580a8c1b70ff1653bc76600f2767aa8ffccc663
- MD5 419d13905829c00d246afed23ef2dc8c
- SHA1 4c42a69a0d91f4bfe13d7c2e3cd15224fd12485c
- SHA512 94e1b7a8ffb476a1c0b60396749727295097e625f5e02729b12ffb79704e854d7bf9d5bea34ecb0d54fd4aca1dabad6b5384acbca50016474b4f17763186171b
- SSDEEP 3072:nm7LZRRGrHnPLiVOvvFeKKtl2kI1S35ll0CF:kRRq2MFmOE3
- TLSH
  T1C8B34A1573EC4B52C6EF6BB8E474221107B1F853E02AFB899D88B5F91C42F9256113BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  BepInEx\core\BepInEx.Harmony.dll
- Size 6KB
- SHA256 00c8f2ac48593e4d45ce4eb26ce4e68b18113c5c489b38b8bf0850f65830d601
- MD5 3c682a76fcdec7e8bbcf2aead019c6df
- SHA1 4e51738a3576888393916eb7e3ff62cd61bb32ff
- SHA512 fd6dc04fe3f0bd24e87d2ae0baa7ea1a3b0888d72f6707db626cf6c6dbb21d02abea9a59325919a0a2099d37aee0328051ece2fcf0217f4b6e4e5521ee076191
- SSDEEP 96:zn31bAyCQCzoHwvxQYbLkmv3oqnSjTkury:FAyi2YbLkozSf5ry
- TLSH
  T190D1A520B3A54333CD7B5B71BDABA7804934B940585B2A7E5A45F2026E16FE80D32F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  BepInEx\core\BepInEx.Preloader.dll
- Size 42KB
- SHA256 55d3895351a9d16b63b6f35f1c01b44ac650979e853d0bd3a442b92a082af64f
- MD5 e7071a7c35b02caa1e1408781e67c063
- SHA1 5ef53c80c1649630ad148e20e6944b9f4efe6ed7
- SHA512 90c6f3198aeef3f56c3f25df1d89dd26a678bb4d8d3ac584826781a879fbea6bc3be0d9e92674bfd7007bf62d82c672f08221f7b634c36b0c8e896851a96819e
- SSDEEP 768:haXyGuv4d0dvWPle+CJl16aYQMMGZIb0PoDb86c70jXE:hqIpfnJLNt4IoZVV
- TLSH
  T16613295037E94715F5FE2F397CB6A15406B2BA475932D74E0DC924AF0D32B904A20BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  BepInEx\core\BepInEx.dll
- Size 125KB
- SHA256 8255b28902886085c578b9e427d3073c97002db85176d2090cdeda90ef14ce70
- MD5 dffb58ce5e000134d3c8e34f075e9508
- SHA1 351f5a98def807df816a359094d29ade067b7cc9
- SHA512 55d2a6fe14d59e22e6fd36f5c70464f60c94aacba260878a4c56c8701cbdcf9fed074e6deb5b312acb226d2701d062a8af42c7afbb9302077b1a2dd50f0a13a9
- SSDEEP 1536:vQ4G2XZrhaE8kV1Gggspns7T6gHuI/Ylmlm3dUtYNwBke5lm/SWtV5kk+e0+S68:vlLy81PpnsigOI/QLtUtbBke4tV52Tf
- TLSH
  T180C32A1523EC8B1EE6FF5A75BCB011150BB5FE07A423F79E4E4C64EE4922381A6117B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  BepInEx\core\HarmonyXInterop.dll
- Size 23KB
- SHA256 7ce1342d3afa0334b59a3e38c0aed15e162b9abe9d46f95f34be44af47f3b493
- MD5 9b287159019adea74fff818124c49a57
- SHA1 a788c6199d1c7ccb6ce17f09996875911d26af46
- SHA512 1b2b1975e6982fff3438d37efff51c9776795c21fd2cf64991524cea007ccf88f6f44047c2e4d6f635b53ad4e856d237026ab22ec86d815ef51af51000ea51e5
- SSDEEP 384:UJpvQvdOrAh+fjh85KbSBohVj520KysQZ8DqY3DBqZU2CamZM2/DVejhUpGSIZTt:UDdrGwjmKbiohVlnsG8LuU2nEGSIZT8q
- TLSH
  T15CB22A46B7AC9F13C6FF477929E627020379EB63A406EB091DCC21E68C477A02B65357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  BepInEx\core\Mono.Cecil.Mdb.dll
- Size 42KB
- SHA256 5896d1898f616701fff18f3b2c71e6b844d2390ef9f41e1c5fccce8cb27c698e
- MD5 5a8b48fcf5e445095799e2c9149ff932
- SHA1 d4c514fbac7a30ddee7d0f597c3eae23a32ccedc
- SHA512 b99b02f296e5c817b8f984317e67c885099a3cc1198ee1808a0033b48ef60d27866719f0986d7f9a1ad547939bf6dc1886e858b9db7ba4375013b96db31957b6
- SSDEEP 768:XgjgMVEdS09ayuzjF/RwmanXdIiO1nqP+7y4CRIJZTMRTIzcRuYhpzt:XgUMn09ay6jF/WmcITIlITMRTtuYnt
- TLSH
  T12213F7112BFD8B1BC29D82FDA4E625061BB1912DA653E7878FC4F1E7BC13B8515021B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  BepInEx\core\Mono.Cecil.Pdb.dll
- Size 84KB
- SHA256 174db44a067f58561510af746f3caeb032037762c57a31c8d9ee32db25174984
- MD5 427e0464246b1e364c5a1a898db2ecf4
- SHA1 dc968ab6e3f9202b5550efb04c0e17c1df04d7d7
- SHA512 02ef1f9246e6117e6e958f019333720f07ff13feb5778b343e69d6e27e74e8ef1e6f122b486ce12b1e1eed546b17499ce906e8660babf281676bd8c6405f0dd6
- SSDEEP 1536:qguHKU52yKfwZyrw03xFjeylsP+ndKFi94lNSex6SU:qguHKU52rwZyrw03uZ+Um4lZ0SU
- TLSH
  T1FF836C39B7FC8972C1AD67B728AB4D0507F2D32ED243A75D49896EF8091776608322D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  BepInEx\core\Mono.Cecil.Rocks.dll
- Size 27KB
- SHA256 54ac539fb5ddc8b44c0e9acd0fcb7324f89d1a072edf8ebc1b06dd691e3d3927
- MD5 36a8284f264bdb2cb3420f5d2b8b10e0
- SHA1 b842aa70ac6ff9cc3922189e971a62659299ef64
- SHA512 3979601ce74b72e1519d020832e57e21b5269bda955878ad52e2d162d6de47fde4793fee9a163551f52081bc2dff90e197f030f8cb83128d07b8571073451e0d
- SSDEEP 384:ZNXMT7GsmR2jm13u4NcU11qvJCyIXcMeDz8PmR1uhLoXeuLMBG9UphJAprjE+J1H:v0I2jo3uobeCyV8uRsdeeum1pg1w7H
- TLSH
  T1D2C2291527598F37C9EF85BE78E1720807F1CA561213CB066CCCA4E9E9877D01B12BEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  BepInEx\core\Mono.Cecil.dll
- Size 331KB
- SHA256 7ae470288fff4a402899c254d0a76cefef55877f5c54f96e83c797cc5bb6e2f6
- MD5 50ae8a86b701c83fce3a814ae8d79321
- SHA1 7c8b821367897baa1b78157d5cea0767f424bc40
- SHA512 04b57207d4fd9fa9f1a71323ea803f023b4b0f2f7a7070bf431806c7a7f41277969c0f5979ecf134812001b47f5d36ec8e8541982473287323e783b3ffe93121
- SSDEEP 6144:BTU5Xn0f1oUh8dK9S5K0UEece8plCTNgoF:9pJS5KEpWgo
- TLSH
  T128746B3537FC5A3BD68F83B6E066142A86F5D419628BEF4D5888F2FA4C437529D02273
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  BepInEx\core\MonoMod.RuntimeDetour.dll
- Size 103KB
- SHA256 40e49bb314391cd7bddc2644f8553eeba92c194b940836b103df16955c464e0c
- MD5 04e1988b3ea65408d4c4c29e34bcdeb1
- SHA1 9c599b3c60f92bd3663042dc0781be78e2ff0882
- SHA512 93fd6df274132691a47e00c84e69c84620de7967434c2164deeb7b605038233be7d29d0acb2dc6dce5bbb4b13225094a61f12458be094ac9b2ec27edc6a524a0
- SSDEEP 1536:IFSuZYhhgotA6e4GDSGVjkodWWD7Fjsgql8R6AvdbiwbeMvdo:IUuOhhgsAPDlV5agql8cAvd5do
- TLSH
  T132A36C2AA7EE4E15D6AD9778B477178043B4F8064897E3AA5CCC65FE0817BC11A203F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  BepInEx\core\MonoMod.Utils.dll
- Size 183KB
- SHA256 9d1495f147ac93c4f81f84538c1a326e8f8a6aefc78d6289d798f3ce1162c5e9
- MD5 96c7b1340105a3b86f3e8d19a844903a
- SHA1 bc258633aab1a2a1839dcc44eed944d865fd6038
- SHA512 36706eb655c995d81aa731c067912452a566ef5b752effdf212603aa0099e28de56588191acced82fb97aeae33df06f229d8cbed969c92cf9b8d439d04c223de
- SSDEEP 3072:ojh9XBmF8HjDrQlDSKNcTD3dAC49Uock8dey4DAYxRDA8:oXUF8HjDrohO3KCllAAYD
- TLSH
  T1F9043C2D5799CE19C5AED6B1F46822604333DC03D2EBD70F7CB8A1F8499A388D6056E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  BepInEx\patchers\FusionPatcher.dll
- Size 10KB
- SHA256 0b89ae8222bb99e59582479c82d55549d0599a5f2d150a43b19b4a0e43ea69e1
- MD5 146a453dfed432e1032eab78e630e5b2
- SHA1 6e08f400cd363d4da1244f3909b07c08df19f3f7
- SHA512 f809c41a4a5fb583111a865b19c4d8a2c4bf167c13222596103ed109fbcd43b9d6473a785220ce7361dd71c54d6bb60a37400c7b50601b155c40760d2dc04ebe
- SSDEEP 192:5zpQqvUwywc9E4i0YfQxrNbPskAS0CSXsHLrUsdrXVKa8:nQqswyO0KQxrNbPskzzdrrbKa8
- TLSH
  T18D22B91877DA9F37C4FE4B7CD4F2426512B1C6A17A12DB5F1CC822E7DC1670046A2AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  BepInEx\plugins\DiagPlugin.dll
- Size 38KB
- SHA256 72aa5d1379454352ef8076eba8ae5756076080bb954911c6b17aecbba11a604c
- MD5 f48000ccc591102aa0f3a2f20b00aca0
- SHA1 b638d685afe4a93ae34fd8cc8a77a922c98abcbc
- SHA512 4d1828e61b3fdcdf308a048f515ff9062b1fd7cd581d7eb84c22ffa3f0763284a4e9f563f50ed6075e30344813a27a2d7e1d37640a9ae5ae427ea861b66697dd
- SSDEEP 768:qXAAnW96GRBh2Uf2VR5th+DfvQ2NcXBcNTqUZXWQv01+xS5xWS:c3nW96GRBh2Uf2V6DfvGBcFXm1v5xWS
- TLSH
  T1AD03076C27D8CE24D5FE8FF24872DA0853B5B9431E42F60D0FE69DD80C76B909A58297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  BepInEx\plugins\FusionMod.dll
- Size 13KB
- SHA256 1a7fdee32ff1c0fb958bb9c2be571114740c5029bda515c2053af433cd63bb02
- MD5 a55593a12190b5e2c06ab4965287b2f9
- SHA1 d087004777e33b92195c0c7dd75eb4a51ac3c3f4
- SHA512 a32ad366ff68d6c7d31997de8b374c094aec78b0877262efae05b956d00daecf56aaa3fae996b87b61b6f26f7bc056370af1470d5bbf8d98db83e202c9112440
- SSDEEP 384:gDwhaG5qS55n0m66RLQjCUkx6nN5Anvytao:nMGYS55n0m6UQR/NCk
- TLSH
  T1DC52F94A27ED4255D5FE8B39B87603159276FE823A62D21F1D86A48D1E323D08D11FF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  BepInEx\plugins\MaxArtUnlock.dll
- Size 10KB
- SHA256 8d36b328a55b7d6fc5248afec95cc80d7f7c82ea3845f69b3ef2f6f3f9a4c13d
- MD5 ba9bd3ae1dc007f94e7a1d2fc2765a12
- SHA1 c66254ec8c980f973b5fcc9f0a51f8936749065a
- SHA512 7a3c9448aa8018c1b7e43a047c83a1479702f3d3faba688334b0b2218a43881c1ac72085c72cf0baab4e0ad2ddaa5589da7c3c8d15cd183ce8b3441253cc6026
- SSDEEP 192:dBERnXlINdBhaG5q+PDJNQhDDoCg+ze5i0PWiwuvcLU05dtQ:sDwhaG5q+I6+e5NOrdtQ
- TLSH
  T1CF2208437BDC4769D6FE47393CD31A185376EA01A92BEA4F5C84B45D09223D85E00FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32